Property reference

glide.html.sanitize_all_fields

Sanitizes all HTML fields globally to remove unwanted markup and code. With the default true setting, HTML input is sanitized; setting it to false disables sanitization across HTML fields.

Default
true
Type
boolean
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property enables or disables the global sanitization of HTML fields, affecting how HTML content is processed throughout the system.
What area does it affect? HTML field processing
What does the default mean? The default value is "true", which means this behavior is enabled by default.
When should you review it? Review this property when configuring security settings or troubleshooting HTML content issues.

Out of the box property record

Raw metadata from the property record.

Property name glide.html.sanitize_all_fields
Sys ID 9ddca9968d30021087de63ac7f1f0061
Type boolean
Application Global
Default value true
Description Controls sanitization behavior of html fields on a global level.
Updated 2024-05-25 03:57:08

Sources

Official references and nearby text excerpts where this property appears.

Context preview Snippet 1
... System Property [sys_properties] table glide.html.escape_script Enables (true) or disables (false) JavaScript tags in HTML fields. • Type: true | false • Default value: true • Location: System Property [sys_properties] table glide.html.sanitize_all_fields Specifies whether all HTML fields are sanitized to remove unwanted code (true) or not (false). • Type: true | false • Default value: true • Location: System Property [sys_properties] table ...
Context preview Snippet 2
... HTML Sanitizer [Updated in Security Center 1.3] • Description ◦(Old‎ <blank> ◦(New‎ This property controls sanitization behavior of HTML fields on a global level from a backend Java context. If "glide.html.sanitize_all_fields" is not set to the recommended value of "true", then, the ServiceNow instance is open to XSS in HTML fields. • security risk ◦(Old‎ <blank> ◦(New‎ The ability to have ...

More in glide.html

Other properties in the same namespace.

All 5 properties in glide.html →